Skip to content

Overview

A single HySecure instance is usually sufficient for handling very small deployments of up to a few hundred users. To scale up the number of supported users, multiple instances of HySecure are configured to be part of a Cluster. Besides supporting hundreds of users, Cluster provides an Always ON functionality through two key features - High Availability (HA) and Load Balancing.

High Availability deployment helps in achieving a fault tolerance system, scaling up the number of supported users, and improving performance and throughput.

HA and load balancing are achieved by deploying two or more instances of HySecure Gateways in a cluster.

Important

Even in a single node deployment, a node is configured as the first node of a cluster. As a result, during the node installation, a cluster needs to be created so that it is future ready for additional nodes.

HySecure Gateway Node Types

An instance of HySecure Gateway is also called a node, it can act as 1) a Load Balancing (LB) or Cluster Manager Node or 2) a VPN or Gateway or Real Node.

  1. Load Balancing (LB) or Cluster Manager Node

    A load balancing node, also called a Cluster Manager node, has the following components:

    1. HySecure Configuration Database

    2. Cluster Configuration module

    3. Load Balancer modules

    Important

    A maximum of two LB nodes are supported in any deployment. These LB nodes operate in an Active-Passive manner such that whenever the active LB node goes down, the passive LB node takes over the role of load balancing the user connections.

  2. Gateway Node

    A Gateway node has the following components:

    1. HySecure Gateway Engine which handles user connections

    2. HySecure Management Console

    Important

    1. A pure Gateway Node cannot act as a Cluster Manager node whereas a Cluster Manager node can act as a Gateway node.

    2. In case of a single node deployment, the node will act as both a Load Balancing node as well as a VPN node.

Node Requirements in a Deployment

The following instructions apply in any deployment scenario, whether it's a single HySecure Gateway instance or multiple instances:

  1. There has to be at least one LB node and one VPN node. So even if there is a single HySecure Gateway instance, it needs to act as both an LB node and a Gateway node.

  2. In a multi-node cluster, there can be a maximum of two LB nodes. These LB nodes will work in an Active-Passive manner such that if the active LB node goes down then the passive LB node takes over the role of load balancing the user connections.

Cluster Configurations

The following types of cluster configurations are supported:

Configuration Type Deployment Type No. of Hosts Cluster Manager nodes HySecure Gateway Node Count
Single Node Cluster Cluster ready for future. 1 1 1
Full Cluster-1 Cluster with minimum hardware and shared services. 2 2 2
Full Cluster-2 Growing cluster with partially shared services. 3 2 3
Full Cluster-3 Deployments with dedicated hosts for different nodes. 4 or more, a maximum of 88 2 2 or more, a maximum of 86

  1. Standalone Configuration (Deprecated)

  2. Single Node Cluster Deployment

  3. Cluster deployment with 2 nodes

  4. Cluster deployment with 3 nodes

  5. Cluster deployments with dedicated nodes